3 ms·
> Traditional security doesn't catch this. > const backdoorCode = crypto.AES.decrypt( "U2FsdGVkX1+LgFmBqo3Wg0zTlHXoebkTRtjmU0cq9Fs=", "ERROR_FILE" ).toString(c
by scotty79 11mo ago
> Traditional security doesn't catch this.
> const backdoorCode = crypto.AES.decrypt(
"U2FsdGVkX1+LgFmBqo3Wg0zTlHXoebkTRtjmU0cq9Fs=",
"ERROR_FILE"
).toString(crypto.enc.Utf8);
Really? Isn't random garbage string pretty strong indication of someone doing something suspicious?
- pixl97 10mo agoI mean there are a number of tools that look for things like high entropy strings and other crypto keys.